Displaying audit trail information

• The auditrpt command displays the information contained in an audit event log file. The administrator may chose to display the entire contents of a log file or selected portions of it. In addition, audit information may be retrieved from either the current log file or one or more previous log files.

• The auditmap command generates the audit map files. The audit map files contains system dependent information and is used by the auditrpt command to interpret and translate numeric data contained in the log file.

• The auditfltr command provides for the portability of audit event log files among different machine architectures.